General
-
Target
sample
-
Size
8KB
-
Sample
230402-g2pydafa55
-
MD5
3fc720ca75f7837bfab23d94c84c93f5
-
SHA1
fb9833ade945deb8a944dc790b97ce45b05b6e38
-
SHA256
9941dfcc6b646ce9e5cff68105ce2d5adbb6abff09cdb91a60af37da6edda5b2
-
SHA512
5e9a68c77295975a4a30e12d39d96728bc2c47c6bda5ef7859eb1e41d7105dcd0b0410748a5b270d37d3814a06bfd489848d21129a6342b0c6b4d3f23fef946c
-
SSDEEP
96:SA0n39jvL2vY9x4+8qPJj4zGwz+zaRHiFMv87912eBmkW78hyepw16u1nABLhT9P:uj2AfBYjKmRmMaimmpa97hW5Esu
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10-20230220-en
Malware Config
Targets
-
-
Target
sample
-
Size
8KB
-
MD5
3fc720ca75f7837bfab23d94c84c93f5
-
SHA1
fb9833ade945deb8a944dc790b97ce45b05b6e38
-
SHA256
9941dfcc6b646ce9e5cff68105ce2d5adbb6abff09cdb91a60af37da6edda5b2
-
SHA512
5e9a68c77295975a4a30e12d39d96728bc2c47c6bda5ef7859eb1e41d7105dcd0b0410748a5b270d37d3814a06bfd489848d21129a6342b0c6b4d3f23fef946c
-
SSDEEP
96:SA0n39jvL2vY9x4+8qPJj4zGwz+zaRHiFMv87912eBmkW78hyepw16u1nABLhT9P:uj2AfBYjKmRmMaimmpa97hW5Esu
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-